CVE-2009-0787

2009-03-2501:30:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2009-0787

ecryptfs

linux kernel

out-of-bounds read

local users

security vulnerability

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

10.1%

JSON

The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.6.28

linuxlinux_kernelMatch2.6.28.1

linuxlinux_kernelMatch2.6.28.2

linuxlinux_kernelMatch2.6.28.3

linuxlinux_kernelMatch2.6.28.4

linuxlinux_kernelMatch2.6.28.5

linuxlinux_kernelMatch2.6.28.6

linuxlinux_kernelMatch2.6.28.7

linuxlinux_kernelMatch2.6.28.8

VendorProductVersionCPE
linuxlinux_kernel2.6.28.1cpe:/o:linux:linux_kernel:2.6.28.1:::
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:::
linuxlinux_kernel2.6.28.2cpe:/o:linux:linux_kernel:2.6.28.2:::
linuxlinux_kernel2.6.28.7cpe:/o:linux:linux_kernel:2.6.28.7:::
linuxlinux_kernel2.6.28.6cpe:/o:linux:linux_kernel:2.6.28.6:::
linuxlinux_kernel2.6.28.3cpe:/o:linux:linux_kernel:2.6.28.3:::
linuxlinux_kernel2.6.28.4cpe:/o:linux:linux_kernel:2.6.28.4:::
linuxlinux_kernel2.6.28.5cpe:/o:linux:linux_kernel:2.6.28.5:::
linuxlinux_kernel2.6.28.8cpe:/o:linux:linux_kernel:2.6.28.8:::

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.28.1	cpe:/o:linux:linux_kernel:2.6.28.1:::
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:::
linux	linux_kernel	2.6.28.2	cpe:/o:linux:linux_kernel:2.6.28.2:::
linux	linux_kernel	2.6.28.7	cpe:/o:linux:linux_kernel:2.6.28.7:::
linux	linux_kernel	2.6.28.6	cpe:/o:linux:linux_kernel:2.6.28.6:::
linux	linux_kernel	2.6.28.3	cpe:/o:linux:linux_kernel:2.6.28.3:::
linux	linux_kernel	2.6.28.4	cpe:/o:linux:linux_kernel:2.6.28.4:::
linux	linux_kernel	2.6.28.5	cpe:/o:linux:linux_kernel:2.6.28.5:::
linux	linux_kernel	2.6.28.8	cpe:/o:linux:linux_kernel:2.6.28.8:::